Validate Computer Accounts in AD

Validate Computer Accounts in AD

Post by Christian » Sat, 07 Aug 2004 03:18:50


Hey all,

I've got a few systems in an AD that I've changed names on and one that was
removed. The Computer accounts still exist in the AD though. Is there some
way I can validate the active systems against the list in the AD or vice
versa, so I can safely remove the uneccesary accounts?

This seems like a simple task but I'm having difficulty finding doc on how
to do this. Pointers anyone??

Cheers
CA
 
 
 

Validate Computer Accounts in AD

Post by MV » Sat, 07 Aug 2004 03:23:58


Hi

You could take a look at this post by Richard Mueller:

http://www.yqcomputer.com/ %24A4rfs6DHA.2628%40TK2MSFTNGP10.phx.gbl



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.yqcomputer.com/

 
 
 

Validate Computer Accounts in AD

Post by Christian » Sat, 07 Aug 2004 03:47:18

That'll work. I guess there's no way to actively poll systems and see who's
really there and who's not.

Thanks for the REALLY fast response too.

Cheers,
CA
 
 
 

Validate Computer Accounts in AD

Post by Cary Shult » Sat, 07 Aug 2004 13:55:10

Christian,

In addition to what Torgeir suggested ( I have not looked at the link but
can already tell that it is a good one! ) I might take a spin over to
http://www.yqcomputer.com/ and look for his oldcmp utility that will help you
determine which computer account objects you can disable / delete. Please
remember that, by default, WIN2000 and WIN XP Pro change their password (
via the secure channel - netlogon ) every 30 days. So, if you are looking
for any computer account objects that have not changed their password in
seven days you will probably get a lot of valid computer account objects in
the results. Joe has it set to default at 90 days ( so, any computer
account object that has not changed its password in 87 days will not show up
in the results ) but you can change this. I suggest looking at 45 days or
60 days....

HTH,

Cary



who's



there
or
http://www.yqcomputer.com/ %24A4rfs6DHA.2628%40TK2MSFTNGP10.phx.gbl
 
 
 

Validate Computer Accounts in AD

Post by MV » Sun, 08 Aug 2004 01:23:24


Hi

That one is also mentioned in the link I provided :-)


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.yqcomputer.com/
 
 
 

Validate Computer Accounts in AD

Post by Cary Shult » Sun, 08 Aug 2004 14:18:22

Right you are!

And right smack dab on the top! I just saw Mueller's name so I ass/u/med
that it was a link to his web site ( very good stuff there ). Did not
really look to well at it.

Sorry!

Cary




but
you